Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0JqkVnTVlvTvbvgr4bdpqj-LGm4.roa
File: 0JqkVnTVlvTvbvgr4bdpqj-LGm4.roa (raw, json)
Hash identifier: BgbAPUVEmiYFfc4i65OaeBVY8LQh6zDZC8poaIqUwQw=
Subject key identifier: D0:9A:A4:56:74:D5:96:F4:EF:6E:F8:2B:E1:B7:69:AA:3F:8B:1A:6E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018A2C1CCC8EBD464C00718677D12B1B6BF6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0JqkVnTVlvTvbvgr4bdpqj-LGm4.roa
Signing time: Fri 25 Aug 2023 09:53:19 +0000
ROA not before: Fri 25 Aug 2023 09:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205964
IP address blocks: 104.239.0.0/23 maxlen: 23
104.239.4.0/23 maxlen: 23
104.239.2.0/23 maxlen: 23
104.239.6.0/23 maxlen: 23
104.143.248.0/22 maxlen: 22
104.143.254.0/23 maxlen: 23
64.137.70.0/23 maxlen: 23
64.137.105.0/24 maxlen: 24
64.137.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:1c:cc:8e:bd:46:4c:00:71:86:77:d1:2b:1b:6b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 25 09:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d09aa45674d596f4ef6ef82be1b769aa3f8b1a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:17:9d:5e:90:61:02:86:26:f7:cc:f4:42:
bd:3b:fd:ed:d1:81:64:d5:20:f4:c3:e5:d2:7e:d3:
8a:e0:f5:36:b8:fe:8b:32:e7:b1:bc:05:d3:2a:a7:
e7:82:bb:20:e5:1b:f3:33:ab:26:57:b8:db:18:d5:
c1:3a:54:e2:80:35:fe:e9:0f:e0:85:fb:4c:83:e2:
aa:e0:cc:49:e0:f6:ce:bf:24:89:81:c4:f7:6b:4e:
b1:4b:ad:33:b9:1b:1d:f8:8c:dd:bd:11:b9:7d:f4:
9c:80:47:93:3a:a5:6f:8c:7e:12:0d:16:6e:67:9f:
bb:07:a4:48:c5:9b:ae:62:5e:c3:a6:40:ab:ab:f9:
74:7f:05:cf:bc:52:ad:02:6c:33:64:0e:55:5d:07:
1d:6f:bf:7d:78:c7:23:7a:13:1a:8e:3b:ca:93:93:
69:88:4b:a3:e5:0a:d9:1c:56:c2:a4:8a:85:f5:f2:
96:76:e7:cb:14:4b:c5:e1:f3:f7:2e:85:62:0c:61:
d1:a3:bc:a2:63:fa:ce:d6:a8:57:bb:1f:c0:a6:d9:
56:ee:12:71:86:84:a5:c1:fb:f8:2d:6c:ea:f5:93:
41:a5:20:a9:03:70:ed:b1:61:57:dd:32:05:3c:26:
04:f0:9a:39:28:02:02:8e:44:f9:f9:da:4c:ac:24:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:A4:56:74:D5:96:F4:EF:6E:F8:2B:E1:B7:69:AA:3F:8B:1A:6E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0JqkVnTVlvTvbvgr4bdpqj-LGm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.70.0/23
64.137.105.0/24
64.137.107.0/24
104.143.248.0/22
104.143.254.0/23
104.239.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:1c:41:7d:8d:18:31:01:38:70:01:bc:8c:63:cf:a4:c9:59:
66:17:22:1e:52:9a:06:63:e1:56:5a:68:ed:6c:6b:46:37:c6:
11:86:b2:2f:5e:b4:29:d3:9a:cd:ac:b1:47:8a:d4:9c:61:7c:
4d:11:e8:f1:ea:9f:2b:1d:ec:3f:e6:2e:ce:00:0e:3f:3f:4e:
f2:98:d1:e3:7a:a8:f2:bb:9d:6d:7c:b6:31:22:cb:89:58:8b:
94:b7:8e:fd:e4:db:a3:8f:fb:e1:6b:db:b1:68:fb:b6:8e:78:
30:b0:84:45:1f:af:70:a2:f6:59:a2:c5:7e:fa:d6:92:a2:97:
d4:6b:d9:0d:f3:3c:7a:97:eb:98:3d:7e:1e:f4:0c:df:2c:ca:
d5:b5:6d:8b:cb:cb:b9:52:86:76:ea:95:74:83:07:81:62:e8:
19:2a:26:c0:ae:2d:e6:52:dd:b0:2a:7a:d4:f2:09:ec:7a:00:
b5:d9:4a:ff:8a:82:7e:7c:90:5b:9c:89:50:a8:c0:d2:4a:85:
cd:f3:fb:81:9a:04:0c:09:f6:50:6e:41:b5:43:5e:95:e6:0e:
56:43:d5:de:d9:cb:3c:5a:f0:1e:bc:ed:ad:37:eb:7e:99:82:
bf:9e:37:25:f0:30:bb:47:b5:85:ae:32:27:b1:b4:ac:da:05:
ca:6e:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:54 2024 by rpki-client on console-ams.rpki-client.org